En resumen
- CVE-2020-8149 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a logkitty (logkitty project), logkitty.
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 81.0% de las vulnerabilidades.
- Solución: actualizar a 0.7.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| logkitty | < 0.7.1
| 0.7.1
|
| logkitty npm | < 0.7.1
| 0.7.1
|
Description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
NVD description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free